RE: [PHP-DB] How to send a SID in a security way - SOLVED!!!

Just wanted to clarify. The devil is always in the details. dave *********************************************************************************************** ----------------------------------------------------------------------------------------------------------------------- Bart Baaten <bart@baaten.nl> wrote on 10/22/2004 03:35 PM I think he meant one was named System1 and the other System2. -----Original Message----- From: dpgirago@mdanderson.org [mailto:dpgirago@mdanderson.org] Sent: vrijdag 22 oktober 2004 22:34 To: Andre Matos Cc: php-db@lists.php.net Subject: RE: [PHP-DB] How to send a SID in a security way - SOLVED!!! Andre, Did you intend to write that both sessions have the same name? Doesn't that result in the same issue with the session identification? dave "Andre Matos" <andre.matos@sympatico.ca> 10/22/2004 03:25 PM To: <php-db@lists.php.net> cc: Hi list, Thanks for all people who tried to help me in my "session" problem. I have found a simple and easy way to have to web-based php applications running in the same server and having one user using both on the same web browser (two different windows or tabs). I did this in one system: session_name("System1"); session_start(); and this in the another system: session_name("System1"); session_start(); Now I can have my two applications running in the same browser at the same time. Thanks for all help that I received!!! Andre -- Andre Matos andre.matos@sympatico.ca -----Original Message----- From: Andre Matos [mailto:andre.matos@sympatico.ca] Sent: Friday, October 22, 2004 12:59 PM To: 'Matt M.' Cc: php-db@lists.php.net Subject: RE: [PHP-DB] How to send a SID in a security way Hi Matt, I am trying to solve my problem to have one browser accessing two different applications (each one in a different window) where each application has its own and unique sessionID. I really don't want to use cookie because I will need that the user enable the option "accept cookies" in the browser. However, I am afraid to pass the sessionID on the URL because someone can cat it. I am using currently using SSL. Can you see any solution for my problem? Thanks. -- Andre Matos andre.matos@sympatico.ca -----Original Message----- From: Matt M. [mailto:h.dudeness@gmail.com] Sent: Friday, October 22, 2004 12:35 PM To: Andre Matos Cc: php-db@lists.php.net Subject: Re: [PHP-DB] How to send a SID in a security way > How can I send a SID (SessionID) in a security way from one page to another? > Is it "security" to do this? not sure what exactly you want. You could just use cookies, dont allow it to be in form fields or query strings. you could use ssl.